launch-strategy

SUSPICIOUS. The stated purpose is benign, but the skill’s actual footprint is broader than needed for launch planning: mandatory external MCP lookups, browser/web ingestion, command execution via an ambiguously sourced `rtk` proxy, and persistent writes. No confirmed malware or direct credential theft is present, but the capability scope and external-tool trust are only partially aligned with the task.